Virus and Warning Spread in Dynamical Networks 



Carlos Rodriguez-LucatercQ 
Departamento de Tecnologias de la Informacion, 
Universidad Autonoma Metropolitana-Cuajimalpa, Av. Constituyentes 1056, 
Col.Lomas Alias, Mexico, D. F., CP. 11950, Mexico 



o 

(N 
-i— > 
O 

O 

6 
o 

O 

>V 

^ : 



> 

oo 

(N 

d 



X 



Roberto Bernal-Jaquez 
Departamento de Matemdticas Aplicadas y Sistemas, 
Universidad Autonoma Metropolitana-Cuajimalpa, Artificios 40, 
Col. Hidalgo, Delegacion Alvaro Obregon, Mexico, D.F 01120, Mexico 

Recent work on information survival in sensor and human P2P networks, try to study the datum 
preservation or the virus spreading in a network under the dynamical system approach. Some 
interesting solutions propose to use non-linear dynamical systems and fixed point stability theorems, 
providing closed form formulas that depend on the largest eigenvalue of the dynamic system matrix. 
Given that in a the Web there can be messages from one place to another, and that this messages 
can be, with some probability, new unclassified virus warning messages as well as worms or other 
kind of virus, the sites can be infected very fast. The question to answer is how and when a network 
infection can become global and how it can be controlled or at least how to stabilize his spreading 
in such a way that it becomes confined below a fixed portion of the network. In this paper, we try 
to make a step ahead in this direction and apply classic results of the dynamical systems theory to 
model the behaviour of a network where warning messages and virus spread. 

PACS numbers: 89.75.Hc, 05.45. Df 



I. INTRODUCTION 

Recently with the constant augmentation in the num- 
ber of internet users as well as the growth in the com- 
plexity of such networks, new security problems have 
appeared in the scene and there is a lack of adequate 
security methods for facing attacks under this new set- 
ting. These new environments are for instance the P2P 
networks, sensor networks, social nets or wireless net- 
works, where information is to be stored, generated and 
retrieved. So under this new environments it can be very 
important to study and model how the information is 
spread or how to keep the spreading of a virus under con- 
trol in such a way that the information still being useful 
under these vulnerable circumstances. In [§} it is studied 
the problem of information survival threshold in sensor 
and P2P networks, modeling the problem as a non-linear 
dynamical system and using fixed point stability theo- 
rems, and obtain a closed form solution that depends 
on an additional parameter, the largest eigenvalue of the 
dynamical system matrix. In the sensor networks for 
instance, the nodes can loss their communications links 
and the nodes can stop working because of system failure 
produced by a virus infection and quarantine process or 
a system maintenance procedure. Under such conditions 
they try to answer the following question: 

PROBLEM: Under what conditions a datum can sur- 
vive in a sensor network? Given that the nodes as well 
as the links can fail with some probability the obvious 
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model can be a Markov chain, but such a model can 
grow in complexity very quickly because the number of 
possible states becomes 3^ where N is the number of 
states. To avoid this mathematical problem, one alter- 
native is to model the system as a non-linear dynamical 
system. Recently they have appeared in the conferences 
and journal articles some very interesting and relevant 
research articles about the virus spread behaviour in a 
P2P network or in scale free nets such as the Web. In 
[J| the authors study the communication mechanisms for 
gossip based protocols. Another very recent and inter- 
esting work on how to distribute antidotes for controlling 
the epidemics spread is presented in |3J. In this research 
the authors analyse the problem under the approach of 
contact processes Q on a finite graph and obtain very in- 
teresting and rigorous results. Concerning the properties 
that arise in the random graphs, such as the existence 
of a giant component, percolation phenomena, node de- 
gree distribution and small world phenomena, and that 
are the base of many recent works on virus spread on 
networks, we can mention [l|, 0, EH as well as [l2[ [l6[ 
[Tol | and @. Concerning the subject on mathematical 
modeling of epidemic spreading we should mention the 
outstanding work done by Romualdo Pastor-Satorras and 
Alessandro Vespignani in [l3l - [l5j . In the present work we 
will take as source of inspiration Q. In Q the authors 
implement some experiments on several real sensor and 
P2P networks (from Intel, MIT, Gnutella, and others) 
to show the accuracy of their method. In this work it is 
claimed that their method is not only applicable to sen- 
sor nets but it is also applicable to many more settings 
where a piece of information may be replicated across 
faulty links and faulty nodes. The authors establish a 
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survivability condition that produce a bound in the de- 
sign of distributed systems, allowing to: 

• Estimate the most economic retransmission rates 
for a datum to survive in a sensor network. 

• Decide which nodes can be removed while still re- 
maining above the survivability threshold in a sen- 
sor network. 

• Drive a virus as datum to extinction for anti-virus 
protection, by deciding how often to quarantine 
nodes and how long they should be kept down. 

• Propagate and maintain information (news, ru- 
mors, etc.) 

So, this work is closely related with the areas of gos- 
sip based protocols, epidemiology and computer secu- 
rity. Gossip-based protocols on networks, whose related 
graphs have dynamic presence of nodes, that keep some 
level of state consistency have been proposed in Q • The 
basic underlying idea of the gossip protocols is that at 
each time step each node i chose to communicate with 
a node j generally following a random rule, exchanging 
information during a period of time, spreading it in the 
system in the same way as the virus are spread. A funda- 
mental issue in this kind of protocols is how the underly- 
ing gossip low level mechanism affects the ability to de- 
sign efficient high level gossip protocol algorithms. In [9( 
the authors show a fundamental limitation on the power 
of the commonly used uniform gossip mechanism for solv- 
ing nearest-resource location problems. They show as 
well that very efficient protocols for this problem can 
be designed using a non-uniform spatial gossip mecha- 
nism. The gossip-based distributed protocol algorithms 
obtained in [9] for complex problems for a set of nodes 
in Euclidean space are implemented by constructing an 
approximated minimum spanning tree. 

1. Previous proposed mathematical model of virus spread. 

With the increasing importance and presence of sen- 
sor as well as P2P networks, networks have a high level 
of congestion and because of that the theory concerning 
information survivability becomes very important. One 
source of inspiration for mathematical modeling prob- 
lems of information survivability in this kind of networks 
is the epidemiology. 

The epidemiology community has developed several 
stochastic models for studying the spread and die-out 
of diseases in a population. The two most relevant ones 
are the SIR and SIS models. Both are stochastic models 
of the spread of disease through a population, where 
the susceptible nodes can get injected on contact with 
infected neighbors. The infected hosts eventually die 
(in the SIR model) or recover and become susceptible 
again (in the SIS model). The point of view adopted 
in [8] was the SIS model. Under this model a node 



is susceptible to a data item when it is online and 
under normal operation. When the nodes start to fail, 
they become immune during their failure, and later 
they become susceptible again when they are back 
online. Some results obtained in Q are very useful 
to analyze the survival of a infection in a population, 
based on the graph theory results similar to the ones 
mentioned in 0, [ill H3 |. In computer security one of 
the important issues that have been studied under SIS 
and SIR infection spreading mathematical models are 
the virus propagation as well as worms on Internet, 
from where, the exponential spread of them and the 
epidemic thresholds can be estimated [l3j],[l4j], 0- Let 
us suppose that we have a sensor/P2P/social network 
of N nodes (sensors or computers or people) and E 
directed links between them. Let us also assume that 
we take very small discrete timesteps of size At where 
At — >• 0. The survivability results in H apply equally 
well to continuous systems. Within a At time interval, 
each node i has probabiity r*j of trying to broadcast 
its information every time step, and each link i — > j 
has a probability /3jj of being up, and thus correctly 
propagating the information to node j . Each node i also 
has a node failure probability Si > (e.g., due to battery 
failure in sensors). Every dead node j has a rate jj of 
returning to the up state, but without any information in 
its memory (e.g., due to the periodic replacement of dead 
batteries). These and other symbols are listed in Table 1. 



Symbol 


Description 


N 




Number of nodes in a network 


Pa 

Si 




Probability that the link 
i —¥ jis up 

Death rate: Probability that node i dies 


li 




Resurrection rate: 

Probability that node i comes back up 


r i 




Retransmission rate: 

Probability that nodez broadcasts 


Pi(t) 




Probability that node 

i is alive at timet and has info 


?i(t) 




Probability that node 

i is alive at timet but without info 


1-P<(t) - 


?*(*) 


Probability that nodez is dead 
Probability that nodcz does 
not receive info from 
any of its neighbors at time t 






Probability column vectors 


f : 5R 2N -> 


SR2JV 


Function representing a dynamical system 


V(/) 




The Jacobian matrix of /(.) 


s 




The N X N system matrix 


As 




An eigenvalue of the ^matrix 


Ai,s 




The largest in magnitude 
eigenvalue of thcS'matrix 


s = 1*1, s I 




Survivability score — Magnitude ofAi,s 



This system can be modeled as a Markov chain, 
where each node can be in one of three states: Has 
Info, No Info or Dead, with transitions between them 
as shown in Diagram 1. The full state of the system 
at any instant consists of N such states, one for each 
node. Thus, there are 3^ system states. Transitions out 
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of the current system state depend only on the current 
state and not on any previous states; thus it is a Markov 
chain. 

The next graph represent the transition that take place 
in each node. 



To simplify the problem and to avoid dependencies on 
starting conditions, we consider the case where all nodes 
are initially in the have info state. 

2. Mam Idea 




Solving this problem for the full Markov chain re- 
quires 3 N variables and is thus intractable, even for 
moderate-sized networks. Exact values for the fast 
extinction threshold are unavailable even for simpler 
versions of this problem. The main contribution of 
8] is an accurate approximation, using a non-linear 
dynamical system of only N variables. The heart of 
their approximation is to consider the states of the two 
different nodes to be mutually independent. Let the 
probability of node i being in the Has Info and No Info 
states at time t be Pi(t) and qi(t) respectively. Thus, 
the probability of its being dead is (1 — pi(t) — qi(t)). 
Starting from state No Info at time t — 1, node i can 
acquire this information (and move to state Has Info) if 
it receives a communication from some other node j. Let 
(i(t) be the probability that node i does not receive the 
information from any of its neighbors. Then, assuming 
the neighbor's states are independent: 



Diagram 1: Transitions on each node 



It can be pointed out that there is an absorbing set of 
states where no node is in Has Info state. Under such 
circumstances the information dies with probability 1 as 
t — > oo. Some combination of parameters lend the system 
quickly to this state and some other combination does 
not so in practice the datum survives for some parame- 
ter combination. The question is: under what conditions 
does the information survive for a long time, and when 
will the information die out quickly? Let C(t) denote the 
expected number of carriers (nodes in Has Info state) at 
time t. In general, C(t) decays exponentially, polyno- 
mially or logarithmically (with expected extinction time 
comparable to or larger than the age of the universe for 
large graphs), depending on the system being below, at 
or above a threshold Q . Let us focus on the fast extinc- 
tion case where C(t) decays exponentially. 

Definition 1. Fast extinction is the setting where the 
number of carriers C(t) decays exponentially over time 
(t(t)cxc-*,c>l) 

Now, the problem can be formally stated as follows: 
PROBLEM: 

• Given: the network topology (link up probabili- 
ties) /3ij the retransmission rates rj, the resurrec- 
tion rates 7$ and the death rates (Si i = 1 . . . N, j = 
1...N) 

• Find the condition under which a datum will suffer 
fast extinction. 



N 



Ut) = X\^-r ] P Jl p J (t-l)) 



(1) 



For each node i, we can use the transition matrix in 
Diagram 1 to write down the probabilities of being in 
each state at time t, given the probabilities at time t — 1 
(recall that we use very small time steps At, and so we 
can neglect second-order terms). Thus: 

Pi (t) = Pi (t - 1)(1 - S t ) + gi (t - 1)(1 - Q(t)) (2) 



<ft(t) =q i (t-m i (t)-S i ) + (l-p i (t-l)-q i (t-l))^ (3) 



3. Main previous Results 

In experimental results have been obtained under 
fast extinction conditions that accurately correspond to 
what their model predicts. The authors claim that the 
accuracy of their model predictions are due to the mixing 
properties of real networks. For the sake of completeness 
we will state the main results in [§( and to show how 
some of them are obtained because our own results will 
be obtained by applying the same procedures. 

Definition 2. Define S to be the N x N system matrix: 



Si 



I -Si 



if i = j 
otherwise 
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Let \Xi t s\ be the magnitude of the largest eigenvalue and 
C(t) = 5Zj=i Pi(*) ^ e expected number of carriers at t of 
the dynamical system. 

Theorem 1. (Condition for fast extinction). Define 

s = |Ai,s| to be the survivability score for the system. 
If s = |Ais| < 1, then we have fast extinction in the dy- 
namical system, that is, C (t) decays exponentially quickly 
over time. 

Where lA^sl is the magnitude of the largest eigenvalue 
of S, being S an N x N system matrix defined as Sy = 
1 — 6 i if i = j and = fjfiji ^ 1 ^. otherwise, and being 

C{t) = Y]^L 1 Pi(t) the expected number of carriers at 
time t of the dynamical system. Two additional results 
that appears in [8| are the following 

Lemma 1. Fixed point. The values (pi(t) = 0,qi(t) = 
) for all nodes i, are a fixed point of the equations f||) 
and (0). Proved by a simple application of the Equations. 

Theorem 2. (Stability of the fixed point). The fixed 
point point of Lemma 1 is asymptotically if the system is 
bellow threshold, that is, s = \Xi,s\ < 1 

Lemma 2. (From reference [8] of [8]) Define V(/) (also 
called the Jacobian matrix) to be a 2N x 2N matrix such 
that 



dfMt-l)) 

dVjit-l) 



(4) 



where v is the concatenation of p and q. Then, if the 
largest eigenvalue (in magnitude) o/V(/) at vj (vector v 
valued at the fixed point) is less than 1 in magnitude, the 
system is asymptotically stable atvf. Also, if f is linear 
and the condition holds, then the dynamical system will 
exponentially tend to the fixed point irrespective of initial 
state. 

In § the authors apply © and obtain the following 
block matrix 



V(/)|*, 



S I 



Si I S2 



(5) 



S 2 i 3 — 




if i = j 
otherwise 



(8) 



So the question is how can be obtained the fixed point of 
the system?. In the following paragraph we will sketch, 
in an alternative way of the used in [8|, how it can be 
done. In dynamical systems theory the fixed point is 
called equilibrium point of the system. In this very point 
the state probabilities become stable, then Pi(t) = Pi(t — 
1) and qi(t) — qi{t — 1). Then simplifying the notation 
by dropping the subindcx and the time parameter we can 
state the following equations system: 



p=p-(l-6)+q-(l-() 

q = q ■ (C - S) + (1 -p - q) ■ 7 



(9) 



after algebraic simplification it can be obtained the 
following equations system 



-<5-p+(l-C)-« = 

1-P + (C -1-S-j) -q = q 



(10) 



Expressing the equations system in matrix form we get 



(11) 



5 


1 - 


c 




P 







1 


c- 






_ q _ 




_ 7 



Solving by Cramer's method we obtain 



P 

q - 



7-(l-C) 



7-(l-C)-5-(C-l-«-7) 
7-(l-C)-HC-l-<5-7) 



(12) 



The expressions (1121) can be simplified by observing 
that the stable state No Info is related with the desired 
fast extinction condition that is also related with Markov 
chain probability condition (1 — C) — ¥ 0, that implies 
p — > 0. Taking into account this fact, we can rewrite 
(TI21 as follows: 



The dimensions of each block matrix are N x N whose 
elements are 



Si- 



The others are 




if i = j 
otherwise. 



(6) 





7-U-C) 




7.(1 


-C)+*-(i-C- 


-5+7) 


= 








(5-7 




7-(l 


-0-5-CC-i- 






(5-7 





7-(l-C)+<5-(l-C+<5+7) 
5'7 



<5-(5+7) 

7 
<5+7 



(13) 




if i = j A. Markovian Analysis 

nij = \ „ 7, ^ s __ ( 7 ) 



3 l 7 ; + <5i 



otherwise 



In [8| the Markovian analysis was avoided because of 
and the size of the resulting configuration space (3 N where 
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N correspond to the number of nodes and 3 to number 
of states in the Markov chain). However, it is interesting 
to analyse the ergodicity behaviour of the Markov chains 
associated inside each node. We have done this by the 
calculation of the corresponding Z-transform of the asso- 
ciated matrix and performing the following steps: 



We obtain the transition matrix P 

f (1-5) 5 \ 
P= ( i_ f) S \ 

V (1 - 7) 7 J 



(14) 



• We calculate the Z-transform of the matrix M 
I — zP, that is 



M = 



( l-z{l-5) -zS 

z{S-C) l-z(l-C) -zS 
y z(-l + j) I-27 



(15) 



• The inverse matrix M 1 of M is obtained 

• The inverse Z-transform is applied to M , obtain- 
ing 

H{n) = Z- l {M- 1 } 

This equation can be written as a sum of two matri- 
ces 0|, S that corresponds to the steady behavior 
and T that represents the transient behavior of the 
Markov Chain, that is 

H(n) ^hS + ^id^T, 

where k\ and k% are constants. Based on this pro- 
cedure we obtained the ergodicity condition, that 
is, Ci < 1 what assures the convergence to a steady 
state no matter what the initial state was. 

All the calculations were made using MATHE- 
MATICA and the ergodicity condition expression 
obtained is given by 



Cl 1_ 7 _ 5 + 2 7 J ■ (16) 



It's worthy to notice that the ergodicity of the 
Markov chain depends on the values of the tran- 
sition probabilities involved. We should also men- 
tion that the calculations of this analysis are an 
additional source of difficulty. The more states the 
Markov chain have, the more complex become the 
algebraic manipulation and Z-transforms. So, it 
is not a surprise that the Markovian analysis was 
avoided in [8| and the choice was the dynamical 
systems approach. 



II. OUR PROPOSAL 

The model described in subsection II II and that 
constitutes the core of the results obtained in H has as 
main purpose to estimate the threshold condition under 
which the propagation of a virus in a P2P network 
decays exponentially. This last question implies that for 
keeping the network below the threshold just mentioned, 
the protocols have to disconnect temporarily some 
nodes, fix the problem and reboot them. This method 
is very efficient for stopping the propagation of the 
virus. In this way the number of virus carriers decays 
exponentially. Let us assume that at the same time we 
need to propagate an alarm signal warning about the 
presence of a worm virus or an antidote [3j in a P2P 
network. Then in these cases we need that the network 
operates over the estimated threshold. So we are in a 
situation where the threshold conditions are antagonist 
and that can happen in a real world setting. Under 
such circumstances the question is How to keep a datum 
and at the same time avoid the virus spreading?. Our 
hypothesis is that it will depend on the proportion of 
virus messages versus warning messages. For this reason 
we will propose a new model that will take into account 
this situation. The previous and the new additional 
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Table 2 


Symbol 


Description 


N 


Number of nodes in a network 




Probability that the link 




i -> jis up 


<5* 


Death rate: Probability that node i dies 


Ji 


Resurrection rate: 




Probability that node i comes back up 


Ti 


Retransmission rate: 




Probability that nodei broadcasts 


Pi(t) 


Probability that node 




i is infected at timer and has virus info 


ult) 


Probability that node has no Info 




i is healthy at timei but susceptible 


l-Pi(i) -«♦(*) -Wi(t) 


Probability that nodez is dead 


u>i(t) 


Probability that node has warning Info 




i is warned at timet 


c< 


Probability that nodez does 




not receive info from 




any of its neighbors at time t 




Probability that nodei 




receive virus 


1 - Vi 


Probability that nodci 




receive a warning 


Xi 


Probability that nodci 




applies vaccin 


p(t),?(t) 


Probability column vectors 




Function representing a dynamical system 


V(/) 


The Jacobian matrix of /(.) 


s 


The N X N system matrix 


As 


An eigenvalue of the Smatrix 


Ai,s 


The largest in magnitude 




eigenvalue of theSmatrix 


s = \ x i,s\ 


Survivability score — Magnitude ofAi ; s 



This system can be modeled as well as a Markov 
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chain, where each node can be in one of three states: 
Infected, Warn Info, No Info or Dead, with transitions 
between them as shown in Diagram 2. The full state of 
the system at any instant consists of N such states, one 
for each node. Therefore, there are A N system states. 
Transitions out of the current system state depend only 
on the current state and not on any previous states; 
then it is a Markov chain without memory. The next 
graph represent the transitions that take place in each 
node for our model. 



Receives Virus 




Diagram 2: Transitions on each node 



qi(t) = q l {t - 1) and w t {t) = Wl {t - 1). Using JTJ), (JTSJ) 
and (|19p . we can state the following result 

Lemma 3. p t (t) + q^t) + Wi(t) -4 

Proof: In the same way that has been done in |3/ we can 
do the subtraction 1 — Pi(t) — Qi(t) — Wi(t) and simplify 
by renaming Xi(t) = Pi(t) + qi(t) + Wi(t) what give us the 
following linear system 

Xi(t) = (1 - S. t - 7i ) • Xi (t - 1) + 7i (20) 

In the fixed point Xi(t) = Xi(t — 1) so if we apply this 
to the last equation we have that 

Xi ® = ^TT ( 21 ) 

7< + Oi 

that is, Pi(t) + qi(t) + Wi(t) — — ^ . Then by Lemma 2 
in this convergence is exponential. 

It is worthy to notice that the same results for the fixed 
points are obtained considering the linear behaviour of 
the system on these points. Using (fT7|). (|T8|) and (fT9|) 
and for simplicity dropping the indexes and the the time 
dependance, we obtain the equations 

-6-p + v(l-()-q = 

(-l + C-<5-7)<Z + (-7 + X>™ = -7 ( 22 ) 
(l-{-v + Cv)q + (l- X -6)v> = 

Whose solutions can be obtained using Cramer's 
method 



Making the same node independence probability as- 
sumption that is stated in equation ([T]) and taking into 
account the new states and transition probabilities shown 
in the Diagram 2, the equations ([2]) and Q as well as 
the new equation corresponding to Wi can be expressed 
as follows: 

Pi(t) = Pitt - !)(! - <y + »(* - !)(! - Ci(t))"i ( 17 ) 

g,(t) = gi (t - l)((i(t) - 5i) + (18) 
(1 - pi(t - 1) - qi(t - 1) - Wi (t - 1)) 7< 
+XtWi(t - 1) 

w i {t) = (l-t i (t))(l-v i )q i (t-l) (19) 
+ (1 - X i -Si)wi{t- 1) 

Also in our case of study, instead of solving the Markov 
Chain, that is rather complicated, we will describe the 
behaviour of our system considering it as a dynamical 
system described by the equations (fT7| . (jTHJ and (fT9| . 
Following we will calculate the fixed points of the sys- 
tem. As we have stated before, in these very points the 
state probabilities become stable, then Pi(t) — pi(t — 1), 



7-(-i+CM<Hx) 

1 ( 7 +5) {5+8* -8C+Sx+vX-Cvx) 1 > 

_ 7<5(l-C-^+C^) 

Once more, this expression can be simplified if we ob- 
serve that the stable state No Info is related with the 
desired fast extinction condition that is also related with 
Markov chain probability condition (1 — £) — > 0, that 
implies p — > 0, this can be summarized as 

p = 

1 = Tts (24) 
w = 

Given that by hypothesis, the probability of events in 
each node are independent, we can try to analyse the 
problem using the Markov approach. This will be made 
in the next subsection. 
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A. Markovian Analysis 

In this section we analyse again the ergodicity be- 
haviour of the Markov chains associated inside each node 
under our model. 

The calculation steps performed were : 



• We obtain the transition matrix P 



( C«(t)- 



Si (l-Ci (*))!/, 

1 - Si 





-Ci(t))(i- 



1 - Xi - Si 




s, \ 

Si 
Si 

1-7*7 



(25) 



Ci 



• we calculate the Z-transform of the matrix M = 
I — zP, that is 

( l-z(-<5 + C) *(-i + C)» »(-i + C)(i-") -*8 A 

1-2(1 -5) -zS 

-z X 1 - z(l - <S - X ) -2(5 

V -27 1 - 2(1 - 7) / 

(26) 

• The inverse matrix M _1 of M is obtained 

• The inverse Z-transform is applied to M~ l , obtain- 
ing 

H(n) = Z-^M- 1 } 

This equation can be written as a sum of two matri- 
ces 0], S that corresponds to the steady behavior 
and T that represents the transient behavior of the 
Markov Chain, that is 

H(n) = hS + k 2 (C 1 ) n T, 

where ki and k 2 are constants. Based on this pro- 
cedure we obtained the ergodicity condition, that 
is, C\ < 1 what assures the convergence to a steady 
state no matter what the initial state was. 

All the calculations were made using MATHE- 
MATICA and the ergodicity condition expression 
obtained is given by 

_ 1 - 25 + C - X + v 7 ! - 2C + C 2 + 2x - 2Cx - ^X + K»X + X 2 



5 2 + C + (-1 + v) X - <>X + S(-l -C + X) 



(27) 



Again, it can be noticed from the calculation above, 
that the ergodicity of the associated Markov chain de- 
pend on the choice of the transition probabilities in- 
volved. It should be also mentioned that the algebraic 
manipulations become even more complex than in the 
case of the Markov chain of Q given that our Markov 
chain have one state more. 



B. Jacobian and fix point 



and xv(t) = (wi(t), w 2 (t) 1 . . . , wjsr(t)). Let the vector 
v(t) = (p(t), q(t), w(i)) be the concatenation of the pre- 
vious vectors and let v/(t) be the vector v(i) evaluated at 
the fixed point. Then, the entire system can be described 
by 



where 



A(*(t-i))H 



tf(*) = f (*(*-!)) 



Pi (t-l)(l-Si) 
+qi(t- 1)(1 -ti(t))vi 

qi(t-l)(Ci(t)-6i) 
+(l-Pi(t-l)-qi(t-l) 
-Wi(t - l))7i + Xi w i(t - !) 

0.-Ci(t))(i-Ui) qi (t-i) 

+(1- X i-Si)wi(t-1) 



(28) 



if i < N 



if N < i < 2N 



if 2N < i < 3N 



Now, following 6], let us define the the Jacobian ma- 
trix of the system, Vf as 



a/«(y(f-i)) 

dv(f - 1) ' 



In order to explore the asymptotic stability of fixed 
points and according to [6j we will have to take into ac- 
count the value of the function Vf in these points In our 
case, we obtain the 37V x 3N Jacobian matrix 



V(f)|v, 



S I 



Si I s 2 



s. 



Si I 



s e 



(29) 



where each block S, Si , . . . is a N x N matrix whose 
elements are given by 



and the others are 



Suj — 



S 2ij - 



S3ij - 




"7i + X* 







if % = j 
otherwise 



if i = j 
otherwise 



if i = j 
otherwise 



if i = j 
otherwise 



(30) 



(31) 



(32) 



(33) 



In our case of study, we can proceed as [8j. 
Firstly, let us define the column vectors p(t) = 
( Pl (t),p 2 (t),...,p N (t)) : q(t) = ( qi (t),q 2 (t),...,q N (t)) 



S. 



if i = j 
otherwise 



(34) 
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Xi - Si 



if i = j 
otherwise. 



(35) 



Once we have calculated the Jacobian matrix of the 
system we can extend the results of Lemma 2. That 
is, if the largest eigenvalue (in magnitude) is less than 
one then it is assured that the system is asymptotically 
stable in the fixed point v and the dynamical system will 
exponentially tend to the hxed point whatever was the 
initial state. Those interested in the detailed proof of 
this Lemma 2 can consult the appendix of Q- 



III. SIMULATIONS. 

Until now, we have theoretically described the be- 
haviour of the net. 



FIG. 2. Number of carriers C(t) vs time (simulation epochs) 
in our model under the threshold. Values for 8 = 0.1 and 
7 = 0.01. 




FIG. 1. Number of carriers C(t) vs time (simulation epochs) 
in Chakrabarti model under the threshold. Values for 8 = 0.1 
and 7 = 0.01 




FIG. 3. Number of carriers C(t) vs time (simulation epochs) 
in Chakrabarti model on the threshold. Values for 8 — 0.07 
and 7 = 0.004 




Using the Dynamical Systems approach we have been 
able to predict the conditions (a threshold) under which 
fast extinction is reached by using a limited set of param- 
eters that assures the we will converge to a fixed point. 

In order to complete the study of our model and com- 
pare its performance with the Chakrabarti model, we 
have made different simulations corresponding to the 
cases in which we are under, on and above the threshold 
values established in the previous section. 

For this end, we have randomly generated the adja- 
cency matrix corresponding to a thirty node graph. We 
have taken, for the sake of comparison, the same set 
of parameters that appears in section 4 of 0, that is, 
r = 0.1 and ftj =0.1. Additionally, we used the dif- 
ferent values of 5 and 7 proposed in || corresponding 
to P2P GNUTELLA data sets. We have fixed v = 0.8 
and x — 0.1 and we have started with six infected nodes 



that we choose randomly. The number of time steps have 
been fixed in our simulation to one and three hundred. 

In Figures [T] and [5] it is shown that if the settings of the 
parameters values fulfil the fast extinction condition then 
the same result is obtained in both models. We can have 
a diverse set of parameters values as long as we are under 
the threshold condition for achieving fast extinction. 

In Figures |3] and 0] we show that if the set of param- 
eters are combined in such a way that they give exactly 
the threshold value the fast extinction is achieved again in 
both models but in this case the fast extinction is slower 
than in the first case. When the parameters values are 
combined in such a way that we are beyond the thresh- 
old value then fast extinction is no longer accomplished 
and the number of carriers grow very fast and eventu- 
ally the whole set of nodes could become infected. This 
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FIG. 4. Number of carriers C(t) vs time (simulation epochs) 
in our model on the threshold. Values for 8 = 0.07 and 7 = 
0.004. 




150 200 250 300 



behaviour due to the presence of the parameter z^. 

FIG. 6. Number of carriers C(i) vs time (simulation epochs) 
in our model above the threshold. Values for 8 = 0.01 and 
7 = 0.01 




FIG. 5. Number of carriers C(t) vs time (simulation epochs) 
in Chakrabarti model above the threshold. Values for S = 
0.01 and 7 = 0.01 




behaviour is shown in Figures [5] and [6] In this case it 
can be observed a slight difference between both models 



IV. CONCLUSIONS AND FUTURE WORK 

As we have exposed in the sections corresponding to 
our proposal, if under our model 1 — Q(t) —> 0, our fix 
point and fast extinction condition are consistent with 
those obtained in Q. In the other side, if under our 
model 1 — > 0, then the fix point and fast extinction 
condition mentioned in the appendix section of § are 
not longer valid. In this last case the dynamical system 
becomes nonlinear, and the degree of non-linearity will 
depend on the topology of the network. In this new set- 
ting our vi parameter start to play a role in the virus as 
well as antidote spreading on the network. In the future 
we will study this problem. If we take as starting point 
this scenario it can be interesting to ask if the system falls 
in a chaotic regime and if this is the case then how the 
stability of the network can be re-established. If we want 
to achieve this state of the system we can recall the syn- 
chronization and chaos tools developed in the research 
field of automatic control. This is one of the subjects 
that we will try to explore in the future. 
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